See how mozilla compares to other vendors in security performance
Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154
Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154
Site isolation issue in the CSS Parsing and Computation component
Privilege escalation in the Enterprise Policies component
Mitigation bypass in the Add-ons Manager component
Integer overflow in the Graphics component
Side-channel in the Web Audio component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Mitigation bypass in the Widget: Win32 component
Mitigation bypass in the Storage: Cache API component
Mitigation bypass in the Networking component
Same-origin policy bypass in the DOM: Service Workers component
Integer overflow in the Networking: JAR component
Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2
Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
Sandbox escape due to use-after-free in the Disability Access APIs component
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Same-origin policy bypass in the Networking: HTTP component
Sandbox escape in the Profile Backup component
Use-after-free in the DOM: Core & HTML component
Same-origin policy bypass in the DOM: Networking component
Use-after-free in the Graphics: ImageLib component
Invalid pointer in the JavaScript: WebAssembly component
Incorrect boundary conditions in the Security: Process Sandboxing component
Use-after-free in the Graphics: Text component
Sandbox escape in the XUL component
Sandbox escape due to use-after-free in the Graphics component
Mitigation bypass in the JavaScript: GC component
Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153
Incorrect boundary conditions in the DOM: Editor component